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Abstract 

A i-design for quantum states is a finite set of quantum states with the property of simulating 
the Haar-measure on quantum states w.r.t. any test that uses at most t copies of a state. We give 
efficient constructions for approximate quantum i-designs for arbitrary t. We then show that an 
approximate 4-design provides a derandomization of the state-distinction problem considered by 
Sen (quant-ph/0512085), which is relevant to solving certain instances of the hidden subgroup 
problem. 

1 Introduction 

i-wise independent and approximately i-wise independent probability distributions have been ex- 
tremely useful in combinatorics and the theory of computing. In this paper, we study their quantum 
counterparts, quantum t-designs. 

Intuitively, a quantum i-design is a probability distribution over quantum states which cannot be 
distinguished from the uniform probability distribution over all quantum states (the Haar measure) 
if we are given t copies of a state from this probability distribution. More formally, we define 

Definition 1 [Generalization of the definition in Ref. [16]] A probability distribution over quantum 
states (pi,\<j>i)) is a complex projective (t,t)- design if 



where the integral over on the left hand side is taken over the Haar measure on the unit sphere 
in C N . 



This definition of complex-projective (t, i)-designs, or quantum t-designs has been previously 
studied in two contexts. 

In the context of quantum information theory, [3, 16, 11, 12, 5] have studied quantum 2-designs, 
giving constructions of 2-designs with 0(N 2 ) states and applying them to various problems in 
quantum information. Hayashi et al. [9] gave a construction of a i-design for arbitrary t with 
0(t) N of states. This is efficient for a fixed dimension N but inefficient when N is much larger 
than t. The N = 2 (one-qubit) case was independently solved by Iblisdir and Roland [10]. 
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Second, quantum t-designs are related to t-designs of vectors on the unit sphere in R , called 
spherical t-designs, which have been studied in the mathematics literature since a seminal paper 
by Delsarte, Goethals and Seidel [6]. An inefficient construction of an exact spherical t-design with 
t°( N ) vectors has been given by Bajnok [2] and Korevaar and Meyers [13]. A spherical t-design 
in H N can be transformed into a (t/2, t/2)-design in C N I 2 . Thus, those results also imply the 
existence of quantum t-designs with a similar number of states. 

To summarize the previous work (for the case when t is fixed and the dimension N is large), 
inefficient constructions of quantum t-designs with an exponential number of states are known for 
any t and efficient constructions are known for t = 2. The contributions of this paper are as follows: 

1. We introduce the notion of an approximate t-design; 

2. We give an efficient construction of approximate t-designs, with 0(N 3t ) states, for any t; 

3. We show how to apply an approximate 4-design to derandomize the state-distinction result 
by Sen [17]. 

2 Summary of results 

Our definition of an approximate (t, t)-design is as follows: 

Definition 2 A probability distribution over quantum states (pi, \4>i)) is an e- approximate (t,t)- 
design if 

(i - e) / avxv'ir^ < Ettfl&x&i)®* <a+€)/ (i 

where the integral over on the left hand side is taken over the Haar measure on the unit sphere 
in C N and 

Ewi&x&i = / iv>xvw- (i) 

Instead of requiring closeness to a t-design in the Zqo norm, as in Definition 2, one could use a 
different norm (e.g., l\ or /2- norm )- This might make design easier to construct but closeness in l\ 
or I2 is not sufficient for Theorem 4 and, possibly, other applications. 

Theorem 1 Fix a constant t. Then, for every N > 2t, there exists an O(j^j^)- approximate 
(t, t) -design consisting of 0(N 3t ) quantum states 1 . 

The t-design of Theorem 1 can be efficiently implemented, for several meanings of "efficiently 
implemented" : 

1. It is possible to generate a quantum state \<j>) distributed according to the probability distri- 
bution (pi,\4>i)) in time 0(log c N). 

2. Because of equation (1), the operators Npi\(f>i) (4>i\ form a POVM measurement. This POVM 
measurement can be implemented in time 0(log c TV). 

lr The big-O constants can depend on t. 
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The first property is just the normal definition of being able to sample from the probability distri- 
bution. (Since we are dealing with states in N dimensions, which can be described by log N qubits, 
"efficient" means polynomial in logiV.) The second property may seem unusual at first but it is 
exactly what we need for our application (Theorem 4). 

In section 4.2, we show that the number of states in the e-approximate (t, t)-design can be 
decreased to 0{N t log c N). There is a simple way to generate the states in the resulting (t, i)-design 
but we are not sure if the corresponding POVM measurement can be efficiently implemented. 

We now give the application of Theorem 1. Radhakrishnan et al. [15] have shown 

Theorem 2 Let |Y>i),|Y>2) be two orthogonal quantum states in C N . Then, 

^||M(^i)-M(^)||i=^(l), 
where M is an orthonormal basis picked uniformly at random from the Haar measure. 
This result was improved by Sen[17]. 

Theorem 3 Let pi,p2 be two mixed states in C N with rankpi + rankpi < for a sufficiently 
large K . Then, 

E^\\M(p 1 )-M(p 2 )\\ 1 = n(f), 

where M is an orthonormal basis picked uniformly at random from the Haar measure and f = 
\\Pi ~ P2\\f is the Frobenius norm of p\ — p 2 (1 1 -A I If = \jY^k,i=\ l a fc/| 2 J- 

Theorem 2 is a particular case of Theorem 3, since — IV^KV^IHf = 2. As next theorem 

shows, we can replace the measurement in a random orthonormal basis by a POVM w.r.t. a complex 
projective 4-design (where "POVM with respect to (pi, \<f>i)) v is just the POVM consisting of one- 
dimensional projectors Npi\4>i)(4>i\). 

Theorem 4 Let f = \\pi — P2\\f and e < cf A , where c is a sufficiently small constant. Then, for 
any mixed states pi, p 2 in C NxN ; 

\\M(p 1 )-M(p 2 )\\ 1 = n(f), 

where M is a POVM with respect to an e-approximate (4, 4) -design. 

Theorems 4 and 1 together derandomize Theorem 3, as long as / = Vl{n~ 1 / 12 ). 

The rest of this paper is structured as follows. In section 3, we compare different definitions of 
t-designs. Then, in section 4, we give our construction of approximate t-designs (Theorem 1). In 
section 5, we show how to use (4, 4)-designs for state-distinction (Theorem 4). These are the main 
results of our paper. 

Some more technical claims are postponed to appendices. In appendix A, we derive expressions 
for expected values of monomials involving amplitudes of a quantum state drawn from Haar mea- 
sure. In appendix B, we prove two theorems relating definitions of (i, t)-designs and in appendix 
C, we show how to implement POVM w.r.t. our (£,i)-design efficiently. 
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3 Definitions of (£, £)-designs 

The earlier papers on (t, i)-designs used a different definition of (t, t)-designs, in terms of polynomials 
of the amplitudes of a state \<j>i). In this section, we show that the two definitions are equivalent. 
We also present a condition on the polynomials of amplitudes which implies Definition 2. 

Let p(x\, . . . ,xn, 2/1, ... , j/jv) De a polynomial of degree at most t in variables x±, . . . ,xjy and 
degree at most t in variables yi, . . . , Y/v. For a state = J2jLi a j\j)> we define 

i>(V0 = - j a AT, «*>•••> «jv)- 

Definition 3 ^4 probability distribution over quantum states (pi, \<j>i}) is a complex projective (t,t)- 
design if, for arbitrary polynomial p(x±, . . . , xn, yi, ■ ■ ■ , Vn) of degree t in variables x±, . . . , xn and 
degree t in variables yi, . . . , y^, we have 

[ p(#ty = £j>iP(&), (2) 

where the integral over \ip) on the left hand side is taken over the Haar measure on the unit sphere 
in C N . 

Theorem 5 (j>i, \<fii)) is a complex projective (t,t)-design according to Definition 1 if and only if 
it is a complex projective (t,i)- design according to Definition 3. 

Proof: In appendix B. fj§ 

As shown in the Appendix A, the Haar-expectation of any unbalanced monomial p (i.e. mono- 
mial with di / Ci for some i € {1, . . . , N}) is 



/ pty)# = (3) 

Jib 



lib 

and the Haar-expectation of any monomial of the form 

p n ■<•;;*•'•;, r> 

for distinct x^ , . . . , Xi k is 

/, PWd ^ = N(N + t'-(N + d-l) (4) 

We show that having an approximate version of these requirements is sufficient for an approxi- 
mate (t, t)-design: 

Theorem 6 Assume that a probability distribution over quantum states (pi,\4>i)) satisfies the fol- 
lowing constraints: 

1. ~^2iPip{(t>i) = for any unbalanced monomial p, 
2. 



YlP^i) N(N + l)...(N + d-l) 



a\...c k \ 

< e- 



'N(N + l)...(N + d-l)' 
for monomials p = Ily=i Xj 3 - { X *i-Y 3 with c\ + . . . + Ck = d and d <t and 
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3. ^ZiPip{<pi) = jf for monomials p = XjX*, where j G {1,2,..., N}. 
Then, (j>i,\<f>i)) is an tie -approximate (t,t)-design. 
Proof: In appendix B. §j 

4 Constructing approximate (£, £)-designs 
4.1 Main construction 

In this section, we prove Theorem 1. It suffices to construct a set of states that satisfies the 
requirements of Theorem 6. For simplicity, assume that N is a power of 2. We use 

Theorem 7 [19] For any N = 2 k , there is a set S of N d functions f : {0, ...,7V - 1} -► 
{0, . . . , N — 1} such that, for any distinct ki, . . . , kj £ {0, . . . , N — 1}, the probability distribu- 
tion of f(ki), . . . , /(kd) (where f is chosen uniformly at random from S) is exactly the uniform 
distribution over tuples of d elements of {0, . . . , N — 1}. 

Such S are called d-wise independent sets. The second technical tool that we use is the Gaussian 
quadrature. 

Lemma 1 [7, Chapter 10.6] Let X be a real-valued random variable and Ci = E[X l \, for i £ 
{!,..., 2t}. Then, there exist real q\, . . . , qit and Xi, . . . , xit such that qi > ; q± + . . . + q2t = 1 and 



2t 

j 

i=l 



for all j G {1, . . . , 2t}. 



In other words, for any continuous probability distribution, we can always construct a discrete 
probability distribution with the first 2t moments having the same values. 

Let |Y>) = Y,iL\ a i\i) be a state drawn from the Haar measure. Let Pn be the probability 
distribution of a.\ and let P = limjv^oo y/NP^. Let a be drawn from P. We let X = \a\ with 
probability 1/2 and X = —\a\ with probability 1/2. Then, E[X^] = for odd j and 

E\X j ] = lim N j/2 = (j/2)\ 

11 n "oc N(N + 1) . . . (N + j/2 - 1) U/ } 

for even j. We apply Lemma 1 to get q±, . . . , qn and x±, . . . , x^t- 

We then replace each qi with one of the two closest multiples of 1/N (i.e., or ^ Ng ^ +1 ) so 

that q± + . . - + q2t remains 1. We simultaneously adjust xi so that qixf stays the same. This changes 
the probabilities qj by at most 1/N and Xj by at most a factor of 1 + 0(1/7V). The moments J2i Qi x l 
change by at most 

^(maxxj - mm xl) = 

due to change in probabilities Xi and at most a multiplicative factor of (1 + 0(1/JV))* = l + 0(l/iV) 
due to change in Xj. Thus, we have 
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Claim 1 



E [x^]- Cj \\=o^y 



Let Si be a set of t-wise independent functions / : {1, . . . , N} —►{].,..., iV} and S2 be a set of 
2i-wise independent functions g : {1, . . . , iV} — > {1, . . . , iV}. 

We now consider the set of quantum states \ipf, g ) = J2jLi a f,g,j\j)i (where / G Si, a G S2) 
generated in a following way: 



1. Let (3f :9 j be a complex number with absolute value ajj = where / is such that gi + . . . + 

m 

N 

2. Let 



«-i < nr- < Qi + • • • + Qi and amplitude e™ 9 ®/ 1 * . 



u f,9,J 



^T N a 2 

2^=1 a f,i 

fori e {1,...,JV}. 
3. Let 



Z^=i a f,i 



Si I • IS2I 

We claim that iV'/.g)) is an approximate (t, i)-design. We first show 

Claim 2 Fix f G Si. If we pick \ip) = J2jLi a f,g,j\j) uniformly at random from \ipf,g), g G S2, 
then 

1. E[h] = /or any unbalanced monomial h of degree at most 2t; 
2. 

k ( \ 2Cj 

for a balanced monomial 

of degree at most It. 
Proof: Let 



h= K<) ci -K<) ct 



be a monomial of degree d = J2j( c j + 4/') which is at most 2t. Then, it contains at most It different 
variables a^, . . ., cti k . Since g is picked from a 2£-wise independent family of functions, phase of 
every of those variables is an independent random variable yj taking values 1, e m l N , . . ., e ^ N - x )^l N 
and 

k ( \ Cj+dj k 

E [h] = f[ ^ f[ E[e i7Ty ^~ d ^ N }. 



j'=i \vLi=i a f;/ 3=1 
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If, for some j, Cj / dj, then the corresponding expectation E[e myi ^ Ci ~ di ^ N ] is 0. This proves the 
first part of the claim. Otherwise, all expectations are 1 and the second part follows. j| 

The first part of the claim immediately implies that the first requirement of Theorem 6 is 
satisfied. To prove the second requirement, we first observe two facts about the normalization 
factor yj^ =1 a 2 f>i : 

1. We have 



N 



iVmin:E 2 < a 2 fi < N max x 2 , 



i=i 



because each of a/^ is equal to one of Xj. 
2. We have 



Pr 



f 



N 



i=i 



2 



> 



c 



< 



C 2- 



(6) 



To prove this bound, we first observe that D[aj^] = E[aj^] - E 2 [a 2 ^] = 2! - (l!) 2 = 1. 
Since the variables a 2 f ■ are t-wise independent (and, hence, 2-wise independent), we have 



D[J2iL\ cl 2 J = N. The bound now follows from Chebyshev inequality. 
We have to bound the expectation of the random variable 




(7) 



with df t i = f{i), where f E Si and the probability of / is equal to |<S l 2|p/, s = — 
we can bound the expectation of 



2 

1"/,. 



X 



2c, 

N 2 \d-l' 
i=l a /,J 



when each / is picked with probability j^hj. We observe that 

1 



min 2rf 
iV d max 2 "*" 2 x, 



< X < 



1 max 2d Xj 
A^min^" 2 ^-' 



Equivalently, 
(8) 



Thus, the maximum and the minimum value of X differ by at most where D 
is independent of N. We take C = N 1 / 6 . If | J2?=i a% - 1| < then 



2d-2 



max? d a;,- 

j J 

■ 2d— 2 
mm. x 



7VV3 



d-1 fe 



n«^<x<(i+ 



JVV3 



2c 



d-1 k 
3=1 



Therefore, 



1 iVVs) 



d-i 



n 



2c, 



N d 



N 



i=i 



2 

f,i 



< 



c 



< E[X] 



7 



< 1 + 



JV1/3 



d-1 



E 



2c 



3=1 



D „ 

N d 



N 

i=i 



< 



c 



By equation (6), 



Pr 



N 



E« 



< 



c 



< 



C 2- 



2c ■ 

Together with the independence of random variables a^\. (which is implied by t-wise independence 
of af ; i j and k < t), this implies 



d-1 k 



i - j^y ' n - ^ * ^ * ( 1 + ^ )" " n + 



i \ 



d-1 k 



D 



3=1 



Nd+1/3 • 



The theorem now follows from claim 1. 

To prove third requirement of Theorem 6, let \ipf, g ) = Ei=i a f,g,i\^>- Then, the expectation of 



XjXj is 



Ei=i \Pf,gA 2 \Pf,g,: 



E Pf,9 a f,9,i<*f,g,i = E ^ oj "I cT " ^ 'A " 



E 



\Pf,g,i 



l^il-l^l Ef=il/^l 2 £1*1- 1^1 

which is just the expectation of \Pf >g> i\ 2 when /, g are chosen uniformly at random. This expectation 

is EF=i %iv~ = 771 by the definition of the random variables Xj. This completes the proof of Theorem 
1. 



4.2 Improved construction 

To decrease the number of states in the (t, i)-design, we use a result about approximately t-wise 
families of functions. 

Definition 4 A family of functions f : {0, . . . , N — 1} — ► {0, . . . , m — 1} is t-wise 5-dependent if, 
for any pairwise distinct i±, . . . , if £ {0, . . . , N — 1}, the variational distance between the probability 
distribution of f(h), • • • , f{it) and the uniform distribution on {0, . . . ,m — 1}* is at most 5. 

Theorem 8 [14] There is a family of t-wise 5-dependent functions f : {0, . . . , N — 1} — ► {0, 1} of 
cardinality 2°(* +lo s lo s N+lo z * ) . 

Instead of 0-1 valued functions, we will need m- valued functions. If m = 2 h , we can use the 
construction of [14] to construct a t log m-wise (5-dependent family of functions /' : {0, . . . , N log m— 
1} -»• {0, 1} of cardinality 2 (* lo s m + lo s lo s Ar + lo s j). We then define f{i) to be equal to the number 
formed by f'(i\ogN), f'(i log N+ 1), . . ., f'(i log iV + log N — 1). This gives us a t-wise (5-dependent 
family of functions / : {0, . . . , N — 1} — > {0, . . . , m — 1}. 

We also use 

Theorem 9 [1] There is a family of t-wise independent functions f : {0, . . . , N — 1} — > {0, 1} of 
cardinality 0(N t / 2 ). 

We modify the previous construction in a following way: 
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• / is picked from a t-wise 5-dependent family of functions / : {0, . . . , TV — 1} — > {0, . . . , m — 1} 
(where m will be specified later). By the discussion after Theorem 8, such a family has 
cardinality 0(m ct (5 log N) c ) for some constant c. 

• g is replaced by two functions: g\ : {0, . . . , N — 1} — > {0, 1} and 52 : {0, . . . , iV — 1} — > 
{0, . . . , N — 1}. is picked from a 2t-wise independent family of functions of Theorem 9. 
#2 is picked from a t-wise 5-dependent family of functions {0, . . . , N — 1} — ► {0, . . . , m — 1}. 
Instead of e***®/* , our phase is (-l^Ole^W/™. 

The number of states in our sample size is then O (N t m ct (log N/S) c ) for some constant c. We will 
take 5 = 0(e) and m = fi(l/e). This gives a design with 0(iV*(log N/e) c ) states. We claim that 
this gives us an e-approximate (t, t)-design. 

The argument is the same as in section 4.1, with the following changes: 

1. In Claim 1, we have 0( mJ ^ ) instead of 0( c * +1 ). 

2. In Claim 2, for monomials that contain a^(a*) d with c+d odd, the expectation is still exactly 
0, because of the (— multiplier which is 1 with probability 1/2 and -1 with probability 
1/2. For monomials 

* = ..ag«)* (9) 

with ci+d\, . . ., Ck + dk all even, the (— term is always 1. Since 52 is t-wise 5-dependent, 
the expectation of h for a fixed / deviates from the expectation for £-wise independent 52 by 
at most c8 times 

k ■ 



n-#T («>) 



for some constant c. 



We then have to bound the expectation of X' (equation (7)) which can be replaced by the 
expectation of X (equation (8)) in the same way as before. The only change is that / is now 
chosen from a t-wise 5-dependent distribution. This means that the expectation of 

Cj-\-dj 




differs from the expectation under a t-wise independent distribution by at most 

Overall, this introduces an additional error of order c(max^,<5) times the expectation of 
(10). Thus, choosing 5 = 0(e) and m = ^(1/e) with appropriate constants is sufficient for an 
e-approximate design. 

To complete the proof, we have to verify that Theorem 6 works, when, instead of an assumption 
about balanced terms, we just have an assumption about terms of the form (9). This part is mostly 
technical and is omitted in this version. 
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5 Derandomizing the measurement in a random basis 

In this section, we prove theorem 4. First, we consider the case when we have an exact (4, 4)-design 
instead of an approximate one. By the definition of POVM, 

L 

\\M( P1 ) - M(p 2 )||i = E NPilttM ~ P2\<f>j)\ 

3=1 

where L is the number of states in the (4, 4)-design. Theorem 4 now follows from 
Lemma 2 

L ( 

£PjK0j|Pl -P2\<f>j)\ = n (- N 
j=l ViV ' 

To prove Lemma 2, we use the fourth moment method of Berger [4]: 
Lemma 3 [4] For any random variable S, 

E\\S\] > E[S2]3/2 

This means that 

j=i (Ej=iPj Kwi -p2\<l>j)\ r 2 

We now bound the numerator and the denominator of this expression. We first observe that 

L 

5>K&|pi - P 2\^)\ 2 = e^Mp! - P2 \<f>)\ 2 (ii) 

3=1 

with |0) on the right hand side chosen according to the Haar measure. (Let |0) = EiIi«iK>- Then, 
equation (11) is true because | {(f>\p\ — P2\4')\ 2 is a polynomial of degree 2 in variables ai and degree 2 
in variables a* and, therefore, its expectation is the same for Haar measure and for a (4, 4)-design.) 
Let Ai, . . . , A n be the eigenvalues of p\ — p 2 - Then, 

\ 1 + ... + \ N = Tr(p 1 )-Tr(p 2 )=0, (12) 
Xj + . . . + \% = \\ Pl - p 2 \\ F = f. 

For the moment, assume that pi — p 2 is diagonal in the basis |1), . . ., \N) and \i) is the eigenvector 
with the eigenvalue Aj. By writing out g{4>) = {{4>\pi — p 2 \4>)) 2 f° r \4>) = Y^f=i a i\i) j we get that 
g{cf>) is equal to 

TV TV 

tf( a i a i) 2 + 2 h\-iaiO*aja* 

i=l i , j = 1 

i<j 
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plus some unbalanced terms. When \4>) is picked from the Haar measure, the expectation of each 
unbalanced term is 0. The expectation of balanced terms is given by equation (4). This gives us 

2 N 1 N 

E \4>) \a\ = N{N + l) E x ' + N{N + 1) 2 E x ^-t = 



i<j 



N \ 2 -, N 



N(N + l){^ Xi ) + N(N + 1) £ ^ N(N + 1)' (13) 

If pi — p2 is not diagonal in the basis |1), . . . , \ N), let U be a unitary transformation that maps 
|1), . . . , | AT) to the eigenbasis of p\ — p2- Then, 

E((<P\pi - pM) 2 = E((4>\UHpi - P2)U\<P)) 2 , 

by the invariance of Haar measure under unitary transformations and U'(pi — p2)U is diagonal 
in the basis |1), . . . , \N). Thus, the expression (13) for the expectation remains the same even if 
pi — p2 is not diagonal in the basis |1), . . . , \ N). 

The expectation of g must be the same if \4>) is picked from a (4, 4)-design. Therefore, 

X>(<^>i - Mi)) 2 = N{ N + iy ^ 

Similarly, 

$>«<A>i - p 2 |0,» 4 = E((4>\ P1 - p 2 \<j ) )f = E(jr \ iai a*] . (15) 

j=l \i=l ) 

For the second equality, we again assumed that p\ — p2 is diagonal in the basis |1), . . . , \N). This 
assumption can be removed in_the same way as before. 

Denote Vi = A^a*. Let iV 4 be a shortcut for N(N + 1)(N + 2)(N + 3). Then, (15) is equal to 



E 



N N N N N 

E^ 4 + E E kS 2 + E ^vfv J v k + J2 2 ^vjv kVl 

i=l i,j=l «J=1 i,j,k=l i,j,k,l=l 

i<j j<k,i^j,i^k i<j<k<l 



24 

N 1 



( \ 

n N N N N 

$> 4 + £ AfA, + ]T A M+ E \ 2 ^A fe + E A *Wz 

i=l i,j'=l i,j'=l i,j,k=l i,j,k,l=l 

V i^i «<i j<k,i=/=j,i=/=k i<j<k<l / 

A E A * E A n +-^E A ' + A E a ' a2 = 



i<j 
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_9_ 

N 1 



N n N 0/ Ar \ 2 Q 

^^^'4 =^ /4 ' <16> 

i=l 7=1 \i=l / 



with the first equality following from equation (4), the second equality following by a rearrange- 
ment of terms, the third equality following from (12) and the inequality following by expanding 

and using A?A^ > for all 
By combining Lemma 3 and equations (14), (15) and (16), we get 



(Ef=i A 



5> m\pi - P2|^-)| > gg TT7? ^ 3jy- 

j=l v JV(JV+l)(iV+2)(JV+3) / 

This implies Lemma 2 in the case when we have an exact (4, 4)-design. 

For the case of e-approximate (4, 4)-design, we bound the difference between the expectations 
of ((4>\pi — P2\4>)) 2 an d (((j>\pi — P2|0)) 4 when \(f>) is drawn from the Haar measure and when it is 
drawn from an approximate (4, 4)-design. We can rewrite 

Mpi - P2\<P)f = E ^mtpjKvM) 2 (17) 

where Xj are eigenvalues of p\ — P2 and \(pj) are the corresponding eigenvectors. By the definition 
of (i, t)-design, the expectation of 

«^><^» 2 = (iff mmr^f > 

changes by at most (where M is the dimension of symmetric subspace H sym for 2 copies of a 
state \(j)}) when \<p) is picked from an e-approximate (4,4) design. The entire sum (17) changes by 
at most ^ 

3 

where the inequality follows from the sum of all positive eigenvalues of p\ — P2 being at most 
Trp\ = 1 and the sum of absolute values of negative eigenvalues being at most Trp2 = 1. Since 
M > this is at most j^. 

Similarly, we can show that the expectation of ((<p\p\ — /?2 1 0) ) 4 changes by at most when 
\4>) is picked from an e-approximate (4,4) design. For our proof to work, those changes have to be 
small compared to the expectations of ((4>\pi — P2\4>}) 2 an d {(4>\pi ~ P2\4>)) A when \4>) is picked from 
the Haar measure. This happens if e < c/ 4 for a sufficiently small constant c. 



5.1 (2, 2)-designs are not sufficient 

We note that using a (4, 4)-design is essential for our construction. First, as shown by Berger [4], a 
bound on the fourth moment is necessary to obtain a bound on i£[|<S'|]. Second, some well-known 
(2, 2)-designs are insufficient for distinguishing between some orthogonal quantum states. 

For example, this is true for (2, 2)-designs constructed from mutually unbiased bases [11]. Let 
\(j>\), ■ ■ •, \4>n) be an orthonormal basis for an iV-dimensional Hilbert space and \<fi), ■ ■ ., \<Pn) he 
another orthonormal basis for the same space. The two bases are mutually unbiased if = 
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^= for all If N is prime, there exist N + 1 orthonormal bases \(f>i,i), ■ ■ ., \4>i,n) (for i £ 

{1, . . . , N + 1}) such that any two of them are mutually unbiased. The collection of states \4>ij) 
(with probabilities 1/N(N + 1) each) is then a (2, 2)-design [11]. 

We now consider the POVM corresponding to this (2, 2)-design. This POVM is equivalent to 
randomly choosing i G {1, . . . , N + 1} (with probabilities 1/(N + 1) each) and then performing an 
orthogonal measurement in the basis |<fo,i), • • ., \<f>i,N}- 

Let = |0i, i), | ^2) = 101,2)- Then, measuring in the first basis perfectly distinguishes the 
states and ^2) but measuring either of those states in any other basis \(f>i,i), ■ ■ ., \4>i,n) produces 
the uniform probability distribution. Therefore, performing the POVM on and \ip2) produces 
two probability distributions with the variational distance 2/(N + 1) between them. 

However, since and \ip2) are orthogonal, we have — IV^KV^I \\f = 2. 

6 Open problems 

It appears plausible that the methods developed above can be applied to construct approximate 
t-designs for unitary transformations (defined in [5]). An important set of open questions is whether 
the efficient approximate t-designs developed above can be applied to derandomize other protocols 
that make use of random states and/or random unitary operators, for example, the protocol for 
locking classical correlations [8]. 

Acknowledgments. We thank Oded Regev for suggesting to use Gaussian quadrature and 
Robin Blume-Kohout, Aram Harrow, Debbie Leung, Pranab Sen and Andreas Winter for discus- 
sions and comments on this paper. 
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Appendix 



A Haar Average of State-Component Monomials 

Consider the iV-dimensional Hilbert space, Ti = C N consisting of the set of normalized pure 
quantum states. These states correspond to the points of a unit sphere 5 2Ar_1 which is the "surface" 
of a ball in 2N real dimensions. If we remove the arbitrary and unphysical phase associated with 
each state then we are left with the complex projective space CP N ~ l . In either case there exists 
a unique natural measure that is induced by the invariant (Haar) measure on the unitary group 
U(N): a uniformly random pure state can be defined by the action of a uniformly random unitary 
matrix on an arbitrary reference state, \<p) = U\(j>o). The measure on pure states is distinguished by 
the rotational invariance of the Haar measure. This measure, which I will denote n(tp), is equivalent 
to the uniform measure on the unit sphere S' 2JV_1 . Choosing a fixed representation, \ifj) = 2~2iCi\i), 
the uniform measure for normalized vectors (pure states) in 7i can be expressed using the Euclidean 
parametrization, 

e s™- 1 ) = (n? =1 d\) 6 (£ |c| 2 - 1) (18) 

where 5 is the Dirac delta function. 

The average value of any function / : H — > C takes the explicit form, 

</M>* = Ss^-i / W <W e S™- 1 ). (19) 

Often the function can be represented or approximated as a polynomial in the components of the 
pure state. The terms of such a polynomial may be calculated directly using the Euclidean measure 
(18) by using an integration trick [18]. Consider first calculating the volume of pure states. We 
have, 



where we have made the change of variables Cj = Ui/r, and used the identity 5(a/b — 1) = bS(a — 
b). (Notice that for calculating the volume of the 2N — 1 sphere one has to be careful about 

distinguishing the constraint 5 (j2b=i \ u l\ 2 ~ r ) from 5(\Jj2b=i\ u l\ 2 ~ r ) f° r the variable radius 
r 2 = Ya=i l c /| 2 -) Collecting factors of r on the left hand side, the main trick for evaluating this 
integral is to introduce the integrating factor exp(— r 2 )dr and then integrate both sides with respect 
to r, 

Vs2 N -i f X ' drr 2N ' l eM-r 2 ) = j V-? =1 d 2 Ui e~ ^ 

F(N) 



Vg2N- 



2 



2tt n 



2N 



7T 
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where we've used the integral identity Jq 00 r q e r = (l/2)T(g + 1/2), and recovered the well-known 
result for the volume of the unit R sphere in R + 1 real dimensions: V s r = 2n R / 2 /(R/2 — 1)! with 
R = 2N. 

Now we can calculate the correlation function for a /c-body product of distinct state components, 
I(k,t) = (| Cl | 2tl |c 2 | 2t2 ••• |c fc | 2 ^> = — L- f d M (V0 |ci| 2tl |c 2 | 2t2 ••• |c fc | 2 ^, (22) 

which corresponds to the expectation of a homogeneous polynomial of degree (t, t), where i = 
X)jLi ij- By the same method as above we obtain, 



(iV-1)! 2 



nj =1 d 2 Uj e-M 2 \ Uj \^ 



7T fe (iV + i-l)! J 

where in the last line we've used 



/ 



d 2 « e-l"l 2 



(tt)""* . (24) 



In order to evaluate the remaining factor we change to polar coordinates, with Uj = x + iy, and 
dxdy = rdrdO, giving for each Uj the factor, 

J d 2 Uj e-l^'l 2 |uj| 2tj = 2vr jT° dr e'^r 2 ^ = 2nT(t j + l)/2 = Trtj!. (25) 

Hence, 

B Proofs of Theorems from section 3 

Proof: [of Theorem 5] 

In Definition 3, instead of a general polynomial p, it suffices to consider the case when p is a 
monomial 

ci Co c/v d-\ do d]*j 

,~y -L ry* /y* 1i It II 

X-l X 2 • • • X^y (/i 1/2 • • • "iV • 

If the equation (2) is true for all monomials p, it will also be true for all polynomials p. 

To see the equivalence with Definition 1, observe that each entry of the density matrix Y^,i Piil^i) (4>i I Y 
is an expectation of a monomial in the amplitudes of \4>i) and the corresponding entry of ^{\ip) {ip^)® 1 dip 
is the expectation of the same monomial when \ip) is picked from the Haar measure. Thus, 
if the expectations are the same for any monomial, the density matrices Z)i Pi I)®* an d 

f^dtp) (ipl)®* dtp are the same and Definition 1 holds. 

In the other direction, for every monomial of degree t in variables aj and degree t in variables 
a*, there is an entry in f^(\ip) (ip\)® t dip which is equal to its expectation. Therefore, Definition 1 
also implies Definition 3. |j 
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Proof: [of Theorem 6] Let Ti sym be the subspace spanned by all states of the form \if))® t . 

Then, J^,(\ip) (tpl)^ dip is just jj, the completely mixed state over the subspace Ti sy m (where 
M = dimH. sym ). We need to prove that, for any \ip S y m ) £ T^symj 



^ ~ 6 < E 



Wsym\ (pi|&><&|®*) Wsym)] < ^ ■ (27) 



M 

We can write any state \ipsym) £ 7~Lsym &s 

\lpsym) = 12 &i 1 ,...,it\'4'ii,—,it}i 
ii<i'2<...<h 

where \ipi lt ...j t ) is the uniform superposition over all basis states . . . ,jt) such that the multisets 
. . . , i t } and {ji, . . . ,j t } are equal. 

Let di lt ... : i t be the number of different basis states . . . , jt) such that the multiset {ji, . . . ,jt} 
is equal to {i±, . . . , it}. (If there are k different elements in {ii, . . . , i t }, occurring ci, . . . ,c& times, 
then di lv ..,i t = ci ,* ! Cfc , .) Then, each of \j±, . . . ,jt) has the amplitude of ^j d ^ m the state 1^,...,^). 

Let a\, . . . ,«at be the amplitudes of a state |Y>) = ^ which is picked from the distribution 
(Pi, |&». Then, 

(^i,...,i t |^i) = d iu ... iit ■ 1 (ii,...,i t \(f>i) = Jd^J t a h ...a it . 

y a ii,...,k 

By summing over all components |V>?i,...,i t ) of IV'sym)) we get that 

(V'sj/m||0i)(^| *IV'sj/m) = 

12 a h,..,h\/ d h,-,H a h ■ ■ ■ a h\\ 12 a h J-\ ''n ■■■ a *jt) 

\i 1 <...<i t j \ji<—<jt ) 

If l^) was picked from the Haar measure, the expectation of (28) would be jj. Thus, it suffices 
to bound the difference of the expected value of (28) between the two cases: \ip) picked from Haar 
measure and \ip) picked from (pi,\4>i)). 

We expand both sums in the equation (28). If ji / i\ for some Z € {1, . . . , t}, then the expectation 
of a term 

a h . . . a it a* x . . . a* t (29) 

is in both cases. When ji = ii for all I G {l,...,fe}, the expectations of (29) under both 
distributions differ by at most 



(28) 



Cl\...C k \ 

a ii,...,it\ a h,—,h\ 



N(N + 1)... (AT + d - 1) 

Since the squared amplitudes lo^,...,^! 2 sum up to 1, this means that the difference between expec- 
tation of (28) in the two cases is at most 

ci!...c fc ! = t\ 

6 N{N + 1) . . . (N + d - 1) iu -' U € N{N + 1) . . . (N + d - 1) ' 
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C Efficient implementation 



In this section, we show how to implement (an approximation) of the POVM w.r.t. one-dimensional 
projectors E fj9 = P/, 9 A r |V'/, 9 )(V'/, 9 l efficiently. 

For this construction, we will need to use the particular family of t-wise independent functions 
from [19]. Let G be a finite field with TV elements (which exists because we constrained N to be 
power of 2). We associate {0, . . . , N — 1} with the elements of G. Using the construction of [19] 
results in f{x) ranging over all polynomials (in x) over G of degree at most t — 1 and g{x) ranging 
over all polynomials over G of degree at most 2t — 1. 

We have E^ g = E g Ef where 

1. Ef is a diagonal matrix, with the entries (Ef)jj = N }_ t a 2 ■ on the diagonal; 

2. E g = ^lY^XYg where \^ g ) = ^ E^ 1 e 2 ^ \j). 

Both Ef and E g constitute a POVM. Thus, we can perform the measurement in two steps, first 
measuring Ef and then measuring E g . 

The POVM Ef can be implemented as follows. Let c±, . . . , q_x be arbitrary and let fj(x) = 
ct_ix* _1 + . . . + c\x + j. Then, for each i and each I G {0, . . . , N — 1}, there is exactly one j such 
that fj(i) = I. This means that, for each i, 

3 1=1 

and Ej E f . = j^r. 

Thus, (ci, . . . , Ct-i) is a uniformly random (t — l)-tuple of elements of {0, 1, . . . , N — 1}. Let 
\4>) = Y^j=o a j\j) be the state that is being measured w.r.t. Ef. To measure cq (after "measuring" 
cx, . . . , C(_x), we first create an ancilla state 

2t N( qi +q 2 + ...+qi) 

J=l Viv i=JV(gi+ g2 + ...+9(-i)+l 

We then compute m = ct_xj* _1 + ■ • • + cij, perform the transformation \i) — > |i — m), uncompute 
m and measure c = i — m. 

Conditional on obtaining outcome c, this results in the transformation f7 c |j) = where I 

is such that 

gi + . . . + qi-i < <qi + ... + qi- 

By definition of a,fj, we have a,f c j = ^j=. Thus, U c \j) = cif c j\j). The corresponding measure- 
ment operator is E c = U C U^. We have Ef c = jp=rE c . Thus, taking cq = c results in a correct 
implementation of the POVM Ef. 

Next, we show how to measure E g . Let do, d 2 , ■ ■ ■ ,dt-i be arbitrary but fixed and gj(x) = 
do + jx + d 2 x 2 + . . . + d 2 t-ix 2t ~ l . 

Let U go \j) = e 2m9J ^\j). Then, U 9 M) = Mm) where 
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are just the vectors of Fourier basis. This has two consequences. First, 

N-l /N-l \ 

E iv^X^l = u 9o E u l = u 9 iul = i. 

1=0 \ 1=0 / 

Therefore, (do, cfc, • • • , cfet-i) is just a uniformly random vector of 2t — 1 values from {0, . . . , N — 1} 
which can be generated by producing the uniform superposition of all |do, cfe, g?3, ■ ■ ■ , tfet-i) and 
measuring it. 

Second, once (do,d,2, ■ ■ ■ , cfet-i) has been produced, d\ can be obtained by performing U^ Q and 
then an orthogonal measurement in the basis \ip[), . . ., IV'jv)- 
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